CVE-2014-0568 in Adobe Acrobat Reader
Summary
The NtSetInformationFile system call hook feature in Adobe Reader and Acrobat 10.x before 10.1.12 and 11.x before 11.0.09 on Windows allows attackers to bypass a sandbox protection mechanism, and consequently execute native code in a privileged context, via an NTFS junction attack.
Reservation
12/20/2013
Disclosure
09/17/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 67553 | Adobe Acrobat Reader privileges management | 269 | Unproven | Official fix | CVE-2014-0568 |